the ScaleBit security team under BitsLab recently discovered a vulnerability in the Uniswap Wallet (iOS version), which BitsLab named "Unauthorized Access to Mnemonic Phrases". This vulnerability allows attackers with physical access to the device to bypass the wallet's identity verification mechanism and directly access the mnemonic phrases stored on the device. This means that anyone who can access an unlocked device can obtain the wallet's mnemonic phrases within 3 minutes. In daily life scenarios, borrowing someone else's phone for a brief period is not uncommon, especially among couples and friends. However, under the impact of this vulnerability, this seemingly harmless borrowing behavior may directly lead to the leakage of wallet mnemonic phrases.
All Comments